A 2Gb/s Network Processor with a 24mW IPsec Offload for Residential Gateways

📋 论文概要

提出一种用于住宅网关的低功耗网络处理器，通过集成包引擎实现2Gb/s吞吐量并支持IPsec卸载，解决了在1Gb/s流量下CPU负载100%导致无法保证服务质量的问题。

💡 主要创新点

• 设计高效包引擎实现双向1Gb/s通信（总吞吐量2Gb/s），避免CPU过载。
• 集成24mW低功耗IPsec卸载引擎，在保证安全的同时大幅降低功耗。

🏷 关键词

📄 原文摘要

The Internet has become an important tool to deliver services such as Voice over Internet Protocol (IP) and high-definition video. To enable the widespread use of these services, it is essential to ensure quality-of-service (QoS) and security protection in communication. In using consumer-oriented gateway equipment (GW) consisting of low-cost network processors (NPs), however, it is difficult to ensure QoS because the CPU load becomes 100% when packets are received at a traffic load of 1Gb/s. A packet engine (PE) achieving a throughput of 2Gb/s (i.e., bidirectional 1Gb/s communication) and offloading the network processing from CPUs solves the problem as shown in Fig. 15.4.1. The PE achieves a 2Gb/s throughput for all cases as shown in Fig. 15.4.2 as follows: (1) inline-type IPsec circuits whose transmitting/receiving blocks independently process enc/decryption, authentication, and encapsulation [1] achieve a total processing speed of

👥 作者与机构

Yukikuni Nishida, Kenji Kawai, Keiichi Koike

NTT, Kanagawa, Japan